Privacy Policy

Last updated: October 2, 2026. This is a translation; in case of any discrepancy, the Ukrainian version prevails.

1. Who processes your data

The data controller is “PanoffSoft” (“we”). For any questions about your personal data, email hello@panoffsoft.com.

2. What data we process

• Contact form data: your name, email or Telegram handle, approximate budget and task description. Along with your request we store the date, page language, the page you submitted it from and your browser type, to understand the context of your inquiry.
• IP address — used at the moment you submit the form to protect against spam and abuse; it is not stored with your request.
• Anonymous visit statistics: pages viewed, button clicks, referral source, country, device and browser type. These are collected by Umami, hosted on our own server without cookies; it cannot identify you and does not track you across other sites.
• Google Analytics data — only with your consent: a pseudonymous browser identifier stored in a cookie, pages viewed, actions on the site, approximate location (country, city), device type, referral source and time of visit. Google Analytics 4 does not store IP addresses.

We do not collect payment details, ID documents or other sensitive information through this site. Please don't submit them in the form.

3. Why we process it

• to reply to your request, discuss your task, prepare a proposal and enter into a contract;
• to protect the site and the form from spam, bots and attacks;
• to understand which parts of the site are useful and improve it.

We do not use your data for newsletters or advertising, and we never sell it.

4. Legal basis

Form data is processed on the basis of your consent, which you give by ticking the box before submitting, and to take steps at your request prior to entering into a contract. Abuse prevention and anonymous statistics rely on our legitimate interest in keeping the site secure and working. Google Analytics is used only on the basis of your consent given in the cookie banner. Processing complies with Ukrainian data protection law and, for visitors in the EU, with the EU General Data Protection Regulation (GDPR).

5. Who we share data with

We use service providers that process data only for the purposes above and on our instructions:

• Hetzner Online GmbH (Germany) — hosting of the server where requests and statistics are stored;
• Cloudflare, Inc. (USA) — site delivery, attack protection and the “are you human” check (Cloudflare Turnstile) in the form;
• Telegram — delivering new-request notifications to us;
• Resend, Inc. (USA) — delivering new-request emails to us;
• Google LLC / Google Ireland Ltd. — visit analytics (Google Analytics), only with your consent.

Some of these providers are located outside Ukraine and the EU, including in the USA. By submitting the form you consent to such transfers. Data may also be disclosed upon a lawful request from public authorities.

6. How long we keep it

• requests — up to 3 years from receipt, or until you withdraw consent, if no contract was concluded;
• if a contract was concluded — for as long as needed to perform it and to meet accounting and tax obligations;
• anonymous statistics cannot identify you and are kept for as long as they are useful for analyzing the site;
• Google Analytics data — 14 months, after which Google deletes it automatically;
• server logs are size-limited and overwritten automatically.

7. Cookies

Strictly necessary. Cloudflare may set technical cookies (such as __cf_bm or cf_clearance) needed to protect the site from bots and attacks. They are not used for tracking and do not require consent.

Analytics — only with consent. Google Analytics sets _ga (up to 2 years) and _ga_<ID> (up to 2 years) to distinguish visitors and sessions. Until you click “Accept analytics”, the Google Analytics script is not loaded at all. Your choice — consent or refusal — is stored in your browser (localStorage) for 6 months, after which we will ask again.

You can change or withdraw your consent at any time via the “Cookie settings” link at the bottom of every page or here. The site uses no advertising or marketing cookies.

8. Your rights

At any time you can:

• find out what data we hold about you and get a copy of it;
• correct inaccurate data;
• request deletion of your data or restriction of its processing;
• object to processing and withdraw your consent (this does not affect processing carried out before withdrawal);
• lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or, if you are in the EU, with your local supervisory authority.

To exercise these rights, email hello@panoffsoft.com. We reply within 30 days.

9. Security

The site is served over HTTPS only. Only we have access to submitted requests; the database is not reachable from the internet, and backups are kept for a limited time.

10. Changes to this policy

If we change this policy, the new version will be published on this page with an updated date.